Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/7ec02096-de1b-338c-bb78-6ac6c3ba802c.roa
File:                     7ec02096-de1b-338c-bb78-6ac6c3ba802c.roa (raw, json)
Hash identifier:          VdbPANs1HhiMgYLQ0mK3jucJIGIeDZWihZbkzIMshG4=
Subject key identifier:   0C:8C:35:08:F6:E6:1F:EC:50:78:10:09:FF:39:71:5C:78:A6:69:AF
Certificate issuer:       /CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8
Certificate serial:       010D0C9F4328584F2D87C4B707E2B9D1BB6B99D0
Authority key identifier: A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/7ec02096-de1b-338c-bb78-6ac6c3ba802c.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        198.97.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:c4:b7:07:e2:b9:d1:bb:6b:99:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=7f150ee0-3759-4c0f-aa7f-8508f5fd3344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4e:37:b5:62:6f:03:1c:a1:2d:3d:1a:05:fd:
                    65:e3:ae:03:1a:d5:18:91:33:ae:3d:62:4a:53:b3:
                    df:ab:2a:9f:c9:20:b8:c5:71:9b:63:7a:3c:02:22:
                    5c:10:80:b3:cb:f3:07:25:16:ac:6e:e3:b7:4f:2d:
                    1e:5f:be:ec:71:f5:13:d1:fe:35:7a:89:c0:94:be:
                    00:98:32:3d:2e:c7:9e:dc:e8:96:74:de:ed:0f:a3:
                    45:f5:da:44:6e:f3:ed:4d:b9:9d:a0:74:41:d8:45:
                    9d:ff:3f:af:f5:c5:1e:c1:88:44:6f:ac:24:f9:87:
                    55:79:8a:3c:39:a8:a1:4b:00:92:02:a1:05:8d:8f:
                    fd:d3:45:14:a1:8b:44:02:46:a8:7a:ae:4c:12:6b:
                    ef:49:09:ee:41:5f:b3:4a:c9:e0:8d:69:45:37:83:
                    24:4f:c2:db:3b:30:b7:9b:7b:a8:6c:a5:40:cd:a1:
                    d6:3d:45:b0:0c:ce:de:e8:4f:81:42:8d:73:fb:3a:
                    84:4b:d7:6d:b2:fb:df:5e:67:17:4e:e3:f0:a6:b3:
                    b7:be:ab:22:8c:ea:86:1b:41:73:94:c4:e9:82:9f:
                    05:cb:5d:ad:87:c0:0a:67:d9:16:b1:33:be:57:95:
                    72:42:71:e1:c8:95:d7:b5:38:53:9f:47:71:8a:8c:
                    10:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8C:35:08:F6:E6:1F:EC:50:78:10:09:FF:39:71:5C:78:A6:69:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/7ec02096-de1b-338c-bb78-6ac6c3ba802c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl

            X509v3 Authority Key Identifier:
                keyid:A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.97.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:a4:34:b8:71:2c:4f:b6:73:20:36:32:a8:4e:e4:15:29:1d:
         6c:f9:2e:8a:32:0d:88:d4:00:b9:e3:2b:4b:0e:e5:e5:8c:a2:
         86:a5:e3:bd:91:a1:31:03:6f:59:8f:70:66:3b:03:1a:5b:04:
         b8:a5:19:66:e8:98:c7:ce:9a:01:d0:3b:ff:0e:f3:39:7b:7a:
         1f:54:37:41:1f:0e:fc:0b:75:a2:73:fe:cc:6b:14:5c:08:98:
         06:c9:c2:09:75:18:64:4c:bb:f7:aa:1a:47:f7:83:a2:91:e0:
         68:ba:0d:90:89:f6:df:17:ce:3f:90:57:06:f1:10:75:bd:83:
         6e:1d:d5:23:71:86:fa:49:ac:ed:b1:60:66:09:db:2d:5f:32:
         22:a2:b8:64:e6:ea:0a:67:de:c7:87:33:9f:39:fa:30:2f:7f:
         51:75:79:72:aa:68:73:a0:80:b7:75:1e:09:24:da:05:f4:46:
         39:e8:03:1a:20:94:dd:79:1b:ec:12:16:1b:ab:1a:2b:71:2b:
         bd:d1:ff:a7:de:39:48:00:6c:71:49:b1:cb:9d:8c:e4:7d:78:
         40:a4:cd:fd:9c:65:92:d9:d4:6a:87:e0:a2:f4:7f:25:3e:fd:
         f6:48:04:c9:ec:1b:78:b5:cf:ae:e5:c0:f9:99:76:b9:1f:aa:
         77:da:2d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:51:26 2026 by rpki-client